HIPAA Notice

Who this notice covers

The Medical Group and its Clinicians, and the business associates who help them (including Rovymi, Telea and the Pharmacy where applicable) when they handle your protected health information ("PHI"). Rovymi and its technology providers handle PHI only on the Medical Group's behalf, under business associate agreements.

How we use and share PHI without your authorization

• Treatment: to review your intake, prescribe, adjust your care, and coordinate with the Pharmacy, labs and your other providers.
• Payment: to bill and collect for services and products you purchase.
• Health care operations: quality review, training, audits, customer support and running the practice.
• When required by law, for public health activities (such as adverse-event reporting to the FDA), health oversight, lawsuits and legal proceedings, law enforcement in limited cases, to avert a serious threat to health or safety, workers' compensation, and to coroners or funeral directors.
• To remind you about refills, check-ins or appointments, and to tell you about treatment options related to your care.

Uses that require your written authorization

We will not use or share your PHI for marketing, sell your PHI, or share psychotherapy notes without your written authorization. Other uses not described in this notice also require your authorization. You may revoke an authorization in writing at any time, except to the extent we already relied on it.

Your rights

• Get a copy of your health record, in paper or electronic form, usually within 30 days, for a reasonable cost-based fee.
• Ask us to correct information you believe is incorrect or incomplete.
• Ask us to communicate with you in a specific way or at a specific address, for example only by portal message.
• Ask us to limit what we use or share. We are not required to agree, except that we must agree not to share information with a health plan for an item you paid for in full out of pocket. (Rovymi does not bill health plans.)
• Get a list of certain disclosures we made in the past six years.
• Get a copy of this notice at any time, and choose someone to act for you, such as a legal guardian.

Our duties

We are required by law to keep your PHI private and secure, to give you this notice, to follow its terms, and to notify you promptly if a breach occurs that may have compromised the privacy or security of your information. We will not use or share your information other than as described here unless you tell us we can in writing.

State law

Some states give extra protection to certain information, such as mental health, substance use, HIV and genetic information. Where a state law is stricter than HIPAA, we follow the stricter law.

Complaints

If you believe your privacy rights have been violated, you can complain to us at care@rovymi.com (subject "HIPAA complaint") or to the U.S. Department of Health and Human Services Office for Civil Rights at hhs.gov/ocr/complaints, or 1-877-696-6775. We will not retaliate against you for filing a complaint.

Changes to this notice

We can change the terms of this notice, and the changes will apply to all information we have about you. The new notice will be available in your patient portal and on this page.

Privacy contact

Privacy Officer, Rovymi (on behalf of the Medical Group): care@rovymi.com.